Medium ELSA-2022-2043 1 CVE

Moderate: c-ares security update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Ecosystem: Oracle Linux

Summary

[1.13.0-6]
- Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	c-ares	0:1.13.0-6.el8
Oracle Linux · 8	c-ares-devel	0:1.13.0-6.el8

Vulnerabilities 1

Unscored —

CVE-2021-3672

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name S…

nodejs nodejs-current ceph c-ares Debian Ubuntu Azure Linux Alpine

Nov 23, 2021